Secure Communication over Fading Channels 



Yingbin Liang and H. Vincent Poor 
Department of Electrical Engineering 
Princeton University 
Princeton, NJ 08544, USA 
Email: {yingbinl,poor} @princeton.edu 



o 
o 

(N 

< 

O 
(N 



> 

m 
m 

00 

o 

O 



X 



Abstract — The fading wire-tap channel is investigated, where 
the source-to-destination channel and the source-to-wire-tapper 
channel are corrupted by multiplicative fading gain coefficients 
in addition to additive Gaussian noise terms. The channel state 
information is assumed to be known at both the transmitter 
and the receiver. The parallel wire-tap channel with independent 
subchannels is first studied, which serves as an information- 
theoretic model for the fading wire-tap channel. Each subchannel 
is assumed to be a general broadcast channel and is not 
necessarily degraded. The secrecy capacity of the parallel wire- 
tap channel is established, which is the maximum rate at which 
the destination node can decode the source information with 
small probability of error and the wire-tapper does not obtain 
any information. This result is then specialized to give the 
secrecy capacity of the fading wire-tap channel, which is achieved 
with the source node dynamically changing the power allocation 
according to the channel state realization. An optimal source 
power allocation is obtained to achieve the secrecy capacity. 
This power allocation is different from the water-filling allocation 
that achieves the capacity of fading channels without the secrecy 
constraint. 

I. Introduction 

Wireless communication has a broadcast nature, where 
security issues are captured by a basic wire-tap channel intro- 
duced by Wyner in [1]. In this model, a source node wishes 
to transmit confidential information to a destination node and 
wishes to keep a wire-tapper as ignorant of this information as 
possible. The performance measure of interest is the secrecy 
capacity, which is the largest reliable communication rate from 
the source node to the destination node with the wire-tapper 
obtaining no information. For the wire-tap channel where the 
channel from the source node to the destination and the wire- 
tapper is degraded, the secrecy capacity was given in [1] for 
the discrete memoryless channel and in [2] for the Gaussian 
channel. The general wire-tap channel without a degradedness 
assumption and with an additional common message for both 
the destination node and the wire-tapper was considered in 
[3], where the capacity-equivocation region and the secrecy 
capacity were given. The wire-tap channel was also considered 
recently for the fading and multiple antenna channels in 
[4], [5]. The secrecy capacity was addressed either for the 
case with a fixed fading state or from the outage probability 
viewpoint. 

In this paper, we study the ergodic secrecy capacity of 
the fading wire-tap channel, which is the maximum secrecy 
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rate that can be achieved over multiple fading states. We 
assume the fading gain coefficients of the source-to-destination 
channel and the source-to-wire-tapper channel are stationary 
and ergodic over time. We also assume both the transmitter and 
the receiver know the channel state information (CSI). Note 
that the CSI of the source-to-wire-tapper channel at the source 
can be justified as follows. In wireless networks, a node may 
be treated as a "wire-tapper" by a source node because it is not 
the intended destination of particular confidential messages. In 
this case, the "wire-tapper" is not a hostile node, and may also 
expect its own information from the same source node. Hence 
it is reasonable to assume that this "wire-tapper" feeds back 
the CSI to the source node. 

The fading wire-tap channel can be viewed as a special case 
of the parallel wire-tap channel with independent subchannels 
in that the channel at each fading state realization corresponds 
to one subchannel. Hence we first study a parallel wire-tap 
channel with L independent subchannels. Each subchannel 
is assumed to be a general broadcast channel and is not 
necessarily degraded, which is different from the model stud- 
ied in [6]. This channel model also differs from the model 
studied in [6] in that the wire-tapper can receive outputs from 
all subchannels. The secrecy capacity of the parallel wire- 
tap channel is established. This result then specializes to the 
secrecy capacity of a parallel wire-tap channel with K + M 
degraded subchannels, which is directly related to the fading 
wire-tap channel. For this model, we assume each of the K 
subchannels satisfies the condition that the output at the wire- 
tapper is a degraded version of the output at the destination 
node, and each of the M subchannels satisfies the condition 
that the output at the destination node is a degraded version 
of the output at the wire-tapper We show that to achieve the 
secrecy capacity, it is optimal to keep the inputs to the M 
subchannels null, i.e., use only the K subchannels, and choose 
the inputs to the K subchannels independently. Therefore, the 
secrecy capacity reduces to the sum of the secrecy capacities 
of the K subchannels. 

We further apply our result to obtain the secrecy capacity 
of the fading wire-tap channel. The fading wire-tap channel 
we study differs from the parallel Gaussian wire-tap channel 
studied in [7] in that we assume the source node is subject to 
an average power constraint over all fading state realization 
instead of each subchannel (channel corresponding to one 
fading state realization) being subject to a power constraint 
as assumed in [7]. Since the source node knows the CSI, 
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it needs to optimize the power allocation among fading 
states to achieve the secrecy capacity. We obtain the optimal 
power allocation scheme, where the source node uses more 
power when the source-to-destination channel experiences a 
larger fading gain and the source-to-wire-tapper channel has a 
smaller fading gain. The secrecy capacity is not achieved by 
the water-filling allocation that achieves the capacity for the 
fading channel without the secrecy constraint. 

In this paper, we use ^[i.l] to indicate a group of variables 
{Xi, X2, ■ ■ ■ , Xl), and use to indicate a group of 

vectors {Xi , X2 , ■ ■ ■ , X'^), where X" indicates the vector 
{Xii, X12, ■ ■ ■ , Xin). Throughout the paper, the logarithmic 
function is to the base 2. 

The paper is organized as follows. We first introduce the 
parallel wire-tap channel with independent subchannels, and 
present the secrecy capacity for this channel. We next present 
the secrecy capacity for the fading wire-tap channel. We finally 
demonstrate our results by numerical examples. 

II. Parallel Wire-tap Channel 

We consider a parallel wire-tap channel with L independent 
subchannels (see Fig. [T]!, which consists of L finite input 
alphabets "^[i.l]' 2L finite output alphabets ^[i^l] and 
Z[i_n- The transition probabihty distribution is given by 



p(y[i,L],^[i,L]|a;[i,L]) = Yipiiyuzilxi) 



(1) 



where xi G Xi, yi G 3^;, and zi G Zi for I ~ 1, . . . , L. 

Note that each of the L subchannels is assumed to be a 
general broadcast channel and is not necessarily degraded as 
assumed in [1]. Hence the model we study is more general 
than the parallel channel model studied in [6] which assumes 
each subchannel is less noisy [8]. 
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code consists of the following: 



• One message set: W = {1, 2, . . . , 2"^} with the message 
W uniformly distributed over W; 

• One (stochastic) encoder at the source node that maps 
each message w G W to a codeword x"^ ; 

• One decoder at the destination node that maps a received 
sequence to a message w G W. 

The secrecy level of the message W at the wire-tapper is 
measured by the equivocation rate defined as follows: 
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Z', 



1,L] 



(2) 



The higher the equivocation rate, the less information the wire- 
tapper obtains. 

A rate-equivocation pair {R, R^) is achievable if there exists 



a sequence of (2 
error probability Pe 
equivocation rate Re satisfying 



nR 

(n) 



codes with the destination decoding 
^ as 7T, goes to infinity and with the 



Re < 



lim —H 



W 



[hL] 



(3) 



We focus on the case where perfect secrecy is achieved, 
i.e., the wire-tapper does not obtain any information about the 



message W. This happens if Re = R. The secrecy capacity 
Cs is the maximum R such that (R, Re = R) is achievable, 
i.e., 

Cs = max R. (4) 

Achievable (R.,R^=R) 

We obtain the following secrecy capacity result for the 
parallel wire-tap channel. 

Theorem 1: The secrecy capacity of the parallel wire-tap 
channel with L subchannels is 



1=1 



(5) 



where Ci. is the secrecy capacity of subchannel I and is given 
by 

Ci=max I{Ui;Yi)-I{Ui;Zi) (6) 

where the maximum in the preceding equation is over the 
distributions p{ui,xi)p{yi, zi\xi), which satisfies the Markov 
chain condition Ui ^ Xi ^ (Yi, Zi). 

The proof of Theorem [T| is relegated to Section [nil 
In the following, we consider a parallel wire-tap channel, 
where each subchannel is either degraded such that the output 
at the wire-tapper is a degraded version of the output at the 
destination node, or degraded such that the output at the 
destination node is a degraded version of the output at the 
wire-tapper. This channel specializes to the fading wiretap 
channel that is considered in Section |IV] and is hence of 
particular interest. 

More formally, we define the channel described above 
to be the parallel wire-tap channel with K + M degraded 
subchannels (see Fig.|2]), which consists of K + M finite input 
alphabets X[i j^t^ and <^[i.a/], 2{K + M) finite output alphabets 

y[ij<],2^[i,K],y[i,Ai]' ^"'l ^[13/1 ■ The transition probability 
distribution is given by 



Piy[l.,K] 1 y[l.,M] : ^[l.K] 7 Z[i,M] \X[1,K] 1 ^'[1,J1/] ) 



K 



M 



= Ylpkiyk 



(7) 



fc=i 



where Xfe G Xk, yu e J^fe, and G Zj. for fc = 1, . . . , K, and 
G Xjn, ym G 3^m, and z„ G for TO = 1, . . . , M. The 
probability distributions Pk{yk,Zk\xk) and PmiVm, Zm\xm) 
satisfy the following degraded conditions: 



Pk{yk,zk\xk) ^ Pk{yk\xk)pk{zk\yk) 

for k = 1, . . . ,K, 

Pin [yirt 1 Zm\Xm )Pm{ym\Zm.) 

for TO = 1, . . . , M; 
i.e., the following Markov chain conditions are satisfied 

Xk^Yk^Zk for k = l,...,K, 

X„i -^Z,n -^Yra for TO = 1, . . . , M. 



(8) 



(9) 



The following secrecy capacity follows easily from Theo- 
rem [T] 



2 



Source 




Destination 



Wire-Tapper 



Fig. 1. Parallel wire-tap channel 




Fig. 2. Parallel wire-tap channel with K + M degraded subchannels 



Corollary 1: The secrecy capacity of the parallel wire-tap 
channel with K + A/ degraded subchannels is 

K 

Cs = J2c^ (10) 
fe=l 

where is the secrecy capacity of subchannel k and is given 
by 

= max /(Xfc; Y^) - I{Xk; Z^). (11) 

Remark 1: It is optimal to choose the inputs to the K 
subchannels independently and set the inputs to the M 
subchannels to be null. Hence the M subchannels do not 
contribute to the secrecy capacity. This is intuitive because the 
wire-tapper obtains all information that the destination node 
obtains over the M subchannels. 



in. Proof of Theorem[T] 

The achievabiUty follows from [3, Corollary 2] by setting 
U = {Ui,...,Ul), X - Y = {Yi,...,Yl), 

and Z = {Zi, . . . , Zl), and choosing the components of U 
and X to be independent. 

To show the converse, we consider a code with length n 
and average error probability P^. The probability distribution 
onW X X^l^ X yil^ X Zll ^ is given by 

A A (12) 

^ p{w)p{x'f^^\w) [[ _[_[ PiivH, zii\xu) 

i=l 1=1 

By Fano's inequality [9, Sec. 2.11], we have 

H{W\Y,l^) < nRPe + l:=nS (13) 
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where S Q if Pe 0. 

We now bound the equivocation rate R^: 

= H{W\Zl^^)^H{W)+H{W) 
-H{W\Y^l^^)+H{W\Y^l^^) 

^< IiW;Y{l^)-IiW;Zll^^)+nS 

L n 



1=1 i=l 



I{W] Zli\Zi,^^j^^.Zrij^^_^ 



nS 



(b) 



L n 



1=1 i=l 
L n 



HWY{l,_,^Yr';Zu\zil.^+,^zii^,^^) 

^(^[U-l]^/ ^ ^liW ^?[i+l]^[l+l,L]) 



1=1 1=1 



- I{WY^"i_^Yi'' ; ^;i|-^/"i+i]^[7+i,L]) 

L n 



+ n6 



+ n6 



1=1 i=l 



■I{W;Yu\Y^l,_,^Yr'ZJl,+,^Zl^+,,^) 
I{W; Zii\Y^^i_^Yl "^^[[i+i]^[/+i,L]) 



1=1 i=l 



L]) 



I{W; Zii\Yf^li_^Yj' "^^/"i+i]^['/+i,L]) 



nS 



n5 



(e) 



L n 



1=1 i=l 

(14) 

where (a) follows from Fano's inequality, {h) follows from 
the chain rule, (c) and [d) follow from Lemma 7 in [3], and 
(e) follows from the following definition: 

Qu (Y^,-^r'ZJ\^+^Z^+i.iA)^ Uu - {WQu). 

(15) 

We note that {Qu,Uu, Xu,Yu, Zu) satisfy the following 
Markov chain condition: 

Qu^UH^Xu^iYu,Zu). (16) 

We introduce a random variable G that is independent of 
all other random variables, and is uniformly distributed over 



{l,2,...,n}. Define Qi = {G,Qig), Ui - (G, C/,g), Xi = 
XiG, Yi = YiG, and Zi = Zig- Note that {Qi,Uu Xi,Yi, Zi) 
satisfy the following Markov chain condition: 



Qi^Ui^Xi^{YuZi). 
Using the above definitions, (fl4] i becomes 



1 = 1 



I{Ui-Zi\Qi) 
Therefore, an upper bound on is 

[l{Ui-Yi\Qi)-I{Ui-Zi\Qi) 



(17) 



(18) 



Re < max 



L 

E 

(=1 



+ (5 (19) 



where the maximum is over the probability distributions 
Pte[i.L],'"[i,L],a;[i,L],y[i,L],Z[i,L])- Finally, we note that each 
term in the summation in (fT9] l depends only on the dis- 
tribution p{qi,ui,xi,yi, zi). Hence there is no loss of op- 
timality to consider only the distributions with the form 
Y[j'^iP{qi,ui,Xi)p{yi, zi\xi). We also note that each term in 
the summation in ( fT9] l is maximized by a constant Qi. Hence 
the following bound does not lose optimality: 



Re < max 

1=1 



I{Ui-Yi)-I{Ui-Zi) 



+ 5 



(20) 



where the maximum for the /-th term in the summation is 
over the distributions p{ui,xi)p{yi^ zi\xi) for I — 1,...,L. 
This concludes the converse proof. 

IV. Fading Wire-tap Channel 

We study the fading wire-tap channel (see Fig.O, where the 
source-to-destination channel and the source-to-wire-tapper 
channel are corrupted by multiplicative fading processes in 
addition to additive white Gaussian processes. The channel 
input-output relationship is given by 



Z, = h2.,X, + 



(21) 



where i is the time index, and Xi is the channel input at 
the time instant i, and Yi and Zi are channel outputs at the 
time instant i, respectively. The channel gain coefficients hu 
and /i2i are zero-mean proper complex random variables. We 
define {hii,h2i), and assume {hi} is a stationary and 

ergodic vector random process. The noise processes {Wi} and 
{Vi} are zero-mean independent identically distributed (i.i.d.) 
proper complex Gaussian with Wi and Vi having variances 
fi^ and ly^, respectively. The input sequence {Xi} is subject 
to the average power constraint P, i.e., i X]"=i ^[-^i^] — 
We assume the channel state information (realization of h^) is 
known at both the transmitter and the receiver instantaneously. 
As we mentioned in the introduction, the source node gets the 
CSl of the channel to the wire-tapper when the wire-tapper 
is not an actual hostile node and is only not the intended 
destination node for a particular confidential message. 
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Fig. 3. Fading Wire-tap Channel 



We first introduce the following lemma that follows from 
[10, lemma 1]. This lemma is useful to obtain the secrecy 
capacity of the fading wire-tap channel. 

Lemma 1: The secrecy capacity of the wire-tap channel 
depends only on the marginal transition distributions p{y\x) 
of the source-to-destination channel and p{z\x) of the source- 
to-wire-tapper channel. 

The following generalization of the result in [2] follows 
directly from Lemma [T] 

Corollary 2: The secrecy capacity of the Gaussian wire-tap 
channel given in [2, Theorem 1] holds for the case with general 
correlation between the noise variables at the destination node 
and the wire-tapper. 

Based on Lemma [T] and Corollary [T] we obtain the secrecy 
capacity of the fading wire-tap channel. 

Theorem 2: The secrecy capacity of the fading wire-tap 
channel is 



C, 



max Eyi 

Ea[P(/i)]<P 



log 1 



log 1 



P{h)\hi 



Pih)\h2 



(22) 



where A -.^ < h : > ^ >■ The random vector h = 

[hi, h2) has the same distribution as the marginal distribution 
of the process {ft, J at one time instant. 

The optimal power allocation that achieves the secrecy 
capacity in ( l22b is given by 



A In 2 



\hl\ 



if 



'-2 I 



A < 



In 2 



A In 2 



\hi\ 



p*{h) = < 



if Ift,!^ > 0, 



> 



< h72 [lP IJ^-j 



0, 



otherwise 



(23) 

where A is chosen to satisfy the power constraint Eyi[P(/i)] = 
P. 



Remark 2: The optimal power allocation ( |23] l to achieve 
the secrecy capacity is not water- filling. This is in contrast to 
the fading channel without the secrecy constraint where water- 
filUng allocation is optimal to achieve the capacity [11]. 

Remark 3: The secrecy capacity in Theorem |2] is estab- 
lished for general fading processes {hj} where only ergodic 
and stationary conditions are assumed. The fading process 
{bii} can be correlated across time, and is not necessarily 
Gaussian. The two component processes {hu} and {/i2i} can 
be correlated as well. 

Remark 4: The secrecy capacity in Theorem [2] is estab- 
lished for the case with general correlation between the noise 
variables Wi and Vi. 

Proof: The fading wire-tap channel can be viewed as 
a parallel wire-tap channel with each subchannel having the 
following form 



Y 
Z 



hiX 
h2X 



V, 



(24) 



where {hi , /i2) is a fixed channel realization of h. Note that the 
subchannel ( |24] | is not physically degraded. We now consider 
the following subchannel: 

Y = hiX + W, Z = j^{hiX + W) + V\ 

if he A (25) 



Y=!^(h2X + V) + W', Z = h2X + V, 



if he A" (26) 



where V and W are zero mean proper complex Gaussian 
random variables with variances v^ — /.j^ and fi^ — j^T^^^^^ 
respectively. The subchannel (|25]l/(|26ll is physically degraded, 
and has the same marginal distribution p{y\x) and p{z\x) as 
the subchannel ( l24l i. Hence by Lemma [T] the parallel wire- 
tap channel with subchannels having the form ( l24l i and with 
subchannels having the form (I25b/(l26b have the same secrecy 
capacity. We can now apply Corollary [T] to the parallel wire- 
tap channel with subchannels having the form (l25l)/(l26l). Note 
that the subchannel ( l25T l with h e A is degraded in the 
same fashion as the K subchannels in and the subchannel 
( l26b with ft e is degraded in the same fashion as the 
M subchannels in From Corollary [T] it is clear that the 
subchannels with ft G do not contribute to the secrecy 
capacity. The achievability of ( l22b now follows from ( fTOl i and 
( fTTI ) by setting the input distribution X C7V(0,P(ft)) for 
h e A. Note that the summation X^ILi ^'^ (fTOt becomes the 
average E/jg^ for the fading channel. 

The converse of ( |22] | follows from the steps that are similar 
to those in [2]. 

We are now left to optimize {22\ over power allocations 
satisfying E^[P(ft)] < P. One can check that the following 
function of P{h) 



log 1 



F(ft)|fti 



log 1 



P(ft)|ft2 



(27) 
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(c): P*{h) as a function of |/i2p 

Fig. 4. Optimal power allocation P*(/i) for a Rayleigh fading wire-tap 
channel 



is concave. The optimal P*{h) given in ( |23] | can be derived 
by the standard Kuhn-Tucker condition (see e.g., [12, p. 314- 
315]). ■ 

V. Numerical Results 

We first consider the Rayleigh fading wire-tap channel, 
where hi and /12 are zero mean proper complex Gaussian 
random variables with variances 1. Hence and |/i2p are 
exponentially distributed with parameter 1. In Fig. |4] (a), we 
plot the optimal power allocation P* (h) as a function of h. It 
can be seen from the graph that most of the source power is 
allocated to the channel states with small |/i2p- This behavior 
is shown more clearly in Fig. |4] (b), which plots P*{h) as a 
function of for different values of |/i2p, and in Fig. |4] 
(c), which plots P*{h) as a function of |/i2p for different 
values of The source node allocates more power to the 

channel states with larger |^ to forward more information to 
the destination node, and allocates less power for the channel 
states with larger |/i2p to prevent the wire-tapper to obtain 
information. It can also be seen from Fig. |4] (b) and Fig. |4] 
(c) that the source node transmits only when the source-to- 
destination channel is better than the source-to-wire-tapper 
channel. 

Fig. |5] plots the secrecy capacity achieved by the opti- 
mal power allocation, and compares it with the secrecy rate 
achieved by a uniform power allocation, i.e., allocating the 
same power for all channel states h ^ A. It can be seen that 
the uniform power allocation does not provide performance 
close to the secrecy capacity for the SNRs of interest. This is 
in contrast to the Rayleigh fading channel without the secrecy 
constraint, where the uniform power allocation can be close 
to optimum even for moderate SNRs. This also demonstrates 
that the exact channel state information is important to achieve 
higher secrecy rate. 

We next consider a fading wire-tap channel, where 
and |/i2p are uniformly distributed over finite mass points 
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Fig. 6. Comparison of secrecy capacity by optimal power allocation with 
secrecy rate by uniform power allocation for a uniformly distributed fading 
wire-tap channel 



{0.2, 0.4, . . . , 2}. It can be seen from Fig. |6] that the secrecy 
rate achieved by the uniform power allocation approaches the 
secrecy capacity as SNR increases. Hence the uniform power 
allocation can be close to optimum for certain distributions of 
the fading gain coefficients. 

VI. Conclusions 

We have established the secrecy capacity for the parallel 
wire-tap channel with independent subchannels. We have 
further applied this result to obtain the secrecy capacity for the 
fading wire-tap channel, where the channel state information is 
assumed to be known at both the transmitter and the receiver. 
In particular, we have derived the optimal power allocation 
scheme to achieve the secrecy capacity. Our numerical results 
demonstrate that the channel state information at the transmit- 
ter is useful to improve the secrecy capacity. 
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